I find a few things about Cedar exciting. The formal verification and automated reasoning stuff sound great! Unfortunately, there doesn't seem to be much of a

I find a few things about Cedar exciting. The formal verification and automated reasoning stuff sound great! Unfortunately, there doesn't seem to be much of a story here to solve authz-aware searching/listing for object/row level access. Since Cedar/AVP doesn't come with an entity store, it seems I'd have to send my entire database(s) on each call so that the policies have the right data to evaluate. If that's true, then it seems like this would be only be useful on small data sets. I'm struggling to come up with use cases for "fine-grained permissions and authorization" (what AVP bills itself as) that don't involve some sort of listing or searching of things.